{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-policy-as-code",
  "id": "policy-as-code",
  "kind": "mechanism",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-security-core",
    "json": "https://banes-lab.com/json/records/layer/security-core",
    "label": "Security Core",
    "markdown": "https://banes-lab.com/records/layer/security-core.md",
    "ref": "layer:security-core"
  },
  "name": "Policy as Code",
  "ref": "architecture:policy-as-code",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-machine-readable-policies",
          "json": "https://banes-lab.com/json/records/lexicon/machine-readable-policies",
          "label": "Machine-Readable Policies",
          "markdown": "https://banes-lab.com/records/lexicon/machine-readable-policies.md",
          "ref": "lexicon:machine-readable-policies"
        }
      ],
      "relation": "requires"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-continuous-compliance",
          "json": "https://banes-lab.com/json/records/architecture/continuous-compliance",
          "label": "Continuous Compliance",
          "markdown": "https://banes-lab.com/records/architecture/continuous-compliance.md",
          "ref": "architecture:continuous-compliance"
        }
      ],
      "relation": "reinforces"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-automated-enforcement",
          "json": "https://banes-lab.com/json/records/lexicon/automated-enforcement",
          "label": "Automated Enforcement",
          "markdown": "https://banes-lab.com/records/lexicon/automated-enforcement.md",
          "ref": "lexicon:automated-enforcement"
        }
      ],
      "relation": "enables"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-manual-only-governance",
          "json": "https://banes-lab.com/json/records/architecture/manual-only-governance",
          "label": "Manual-Only Governance",
          "markdown": "https://banes-lab.com/records/architecture/manual-only-governance.md",
          "ref": "architecture:manual-only-governance"
        }
      ],
      "relation": "conflicts-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-policy-maintenance",
          "json": "https://banes-lab.com/json/records/lexicon/policy-maintenance",
          "label": "Policy Maintenance",
          "markdown": "https://banes-lab.com/records/lexicon/policy-maintenance.md",
          "ref": "lexicon:policy-maintenance"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#tension-policy-as-code-policy-maintenance",
          "json": "https://banes-lab.com/json/records/tension/policy-as-code-policy-maintenance",
          "label": "Policy as Code / Policy Maintenance",
          "markdown": "https://banes-lab.com/records/tension/policy-as-code-policy-maintenance.md",
          "ref": "tension:policy-as-code-policy-maintenance"
        }
      ],
      "relation": "tensions"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-manual-only-review",
          "json": "https://banes-lab.com/json/records/lexicon/manual-only-review",
          "label": "Manual-Only Review",
          "markdown": "https://banes-lab.com/records/lexicon/manual-only-review.md",
          "ref": "lexicon:manual-only-review"
        }
      ],
      "relation": "violated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-fitness-functions",
          "json": "https://banes-lab.com/json/records/architecture/fitness-functions",
          "label": "Fitness Functions",
          "markdown": "https://banes-lab.com/records/architecture/fitness-functions.md",
          "ref": "architecture:fitness-functions"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-recommended",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-recommended",
          "label": "recommended",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-recommended.md",
          "ref": "vocabulary:severity-recommended"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/records/architecture-category/security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/records/architecture-category/security-privacy-compliance-governance.md",
          "ref": "architecture-category:security-privacy-compliance-governance"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/anatomy/governance#file-governance-rules-eslint-closure-no-disable-comments-eslint-rule-ts",
          "json": "https://banes-lab.com/json/source/governance/rules/eslint/closure-no-disable-comments.eslint.rule.ts",
          "label": "rules/eslint/closure-no-disable-comments.eslint.rule.ts",
          "markdown": "https://banes-lab.com/source/governance/rules/eslint/closure-no-disable-comments.eslint.rule.ts.md",
          "ref": "anatomy:file-governance-rules-eslint-closure-no-disable-comments-eslint-rule-ts"
        },
        {
          "href": "https://banes-lab.com/anatomy/governance#file-governance-rules-eslint-closure-rule-shape-eslint-rule-ts",
          "json": "https://banes-lab.com/json/source/governance/rules/eslint/closure-rule-shape.eslint.rule.ts",
          "label": "rules/eslint/closure-rule-shape.eslint.rule.ts",
          "markdown": "https://banes-lab.com/source/governance/rules/eslint/closure-rule-shape.eslint.rule.ts.md",
          "ref": "anatomy:file-governance-rules-eslint-closure-rule-shape-eslint-rule-ts"
        }
      ],
      "relation": "enforced-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-security-theater",
          "json": "https://banes-lab.com/json/records/architecture/security-theater",
          "label": "Security Theater",
          "markdown": "https://banes-lab.com/records/architecture/security-theater.md",
          "ref": "architecture:security-theater"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-authorization-scattering",
          "json": "https://banes-lab.com/json/records/architecture/authorization-scattering",
          "label": "Authorization Scattering",
          "markdown": "https://banes-lab.com/records/architecture/authorization-scattering.md",
          "ref": "architecture:authorization-scattering"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-control-plane",
          "json": "https://banes-lab.com/json/records/architecture/control-plane",
          "label": "Control Plane",
          "markdown": "https://banes-lab.com/records/architecture/control-plane.md",
          "ref": "architecture:control-plane"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-attribute-based-access-control",
          "json": "https://banes-lab.com/json/records/architecture/attribute-based-access-control",
          "label": "Attribute-Based Access Control",
          "markdown": "https://banes-lab.com/records/architecture/attribute-based-access-control.md",
          "ref": "architecture:attribute-based-access-control"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-policy-enforcement",
          "json": "https://banes-lab.com/json/records/architecture/policy-enforcement",
          "label": "Policy Enforcement",
          "markdown": "https://banes-lab.com/records/architecture/policy-enforcement.md",
          "ref": "architecture:policy-enforcement"
        }
      ],
      "relation": "refactors"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/pag/guide#writing-constraints",
          "json": "https://banes-lab.com/json/pag/guide/writing-constraints",
          "label": "Writing constraints",
          "markdown": "https://banes-lab.com/pag/guide/writing-constraints.md",
          "ref": "chapter:/pag/guide#writing-constraints"
        },
        {
          "href": "https://banes-lab.com/disciplined-methodology#three-encodings",
          "json": "https://banes-lab.com/json/disciplined-methodology/start/three-encodings",
          "label": "Three encodings",
          "markdown": "https://banes-lab.com/disciplined-methodology/start/three-encodings.md",
          "ref": "chapter:/disciplined-methodology#three-encodings"
        },
        {
          "href": "https://banes-lab.com/disciplined-methodology#from-chat-to-tree",
          "json": "https://banes-lab.com/json/disciplined-methodology/start/from-chat-to-tree",
          "label": "Where a rule lives",
          "markdown": "https://banes-lab.com/disciplined-methodology/start/from-chat-to-tree.md",
          "ref": "chapter:/disciplined-methodology#from-chat-to-tree"
        },
        {
          "href": "https://banes-lab.com/software-architecture/coverage#an-architecture-is-its-predicate-set",
          "json": "https://banes-lab.com/json/software-architecture/coverage/an-architecture-is-its-predicate-set",
          "label": "From intent to predicate",
          "markdown": "https://banes-lab.com/software-architecture/coverage/an-architecture-is-its-predicate-set.md",
          "ref": "chapter:/software-architecture/coverage#an-architecture-is-its-predicate-set"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-anti-patterns",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-anti-patterns",
          "label": "Anti-patterns",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-anti-patterns.md",
          "ref": "chapter:/ontology#architecture-category-anti-patterns"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-control-coordination-centralization",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-control-coordination-centralization",
          "label": "Control / Coordination / Centralization",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-control-coordination-centralization.md",
          "ref": "chapter:/ontology#architecture-category-control-coordination-centralization"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-portability-infrastructure-deployment",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-portability-infrastructure-deployment",
          "label": "Portability / Infrastructure / Deployment",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-portability-infrastructure-deployment.md",
          "ref": "chapter:/ontology#architecture-category-portability-infrastructure-deployment"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-observability-auditability-traceability",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-observability-auditability-traceability",
          "label": "Observability / Auditability / Traceability",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-observability-auditability-traceability.md",
          "ref": "chapter:/ontology#architecture-category-observability-auditability-traceability"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-core-vocabulary",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-core-vocabulary",
          "label": "Core Vocabulary",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-core-vocabulary.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-core-vocabulary"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-security-privacy-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-resolutions",
          "json": "https://banes-lab.com/json/ontology/schema/the-resolutions",
          "label": "The resolutions",
          "markdown": "https://banes-lab.com/ontology/schema/the-resolutions.md",
          "ref": "chapter:/ontology/schema#the-resolutions"
        }
      ],
      "relation": "linked-from"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/anatomy/governance#file-governance-rules-eslint-closure-rule-shape-eslint-rule-ts",
          "json": "https://banes-lab.com/json/source/governance/rules/eslint/closure-rule-shape.eslint.rule.ts",
          "label": "rules/eslint/closure-rule-shape.eslint.rule.ts",
          "markdown": "https://banes-lab.com/source/governance/rules/eslint/closure-rule-shape.eslint.rule.ts.md",
          "ref": "anatomy:file-governance-rules-eslint-closure-rule-shape-eslint-rule-ts"
        },
        {
          "href": "https://banes-lab.com/anatomy/pipeline#file-pipeline-core-factories-plan-factory-ts",
          "json": "https://banes-lab.com/json/source/pipeline/core/factories/plan.factory.ts",
          "label": "stagesFor",
          "markdown": "https://banes-lab.com/source/pipeline/core/factories/plan.factory.ts.md",
          "ref": "anatomy:file-pipeline-core-factories-plan-factory-ts"
        },
        {
          "href": "https://banes-lab.com/anatomy/pipeline#file-pipeline-core-coordinators-stage-coordinator-ts",
          "json": "https://banes-lab.com/json/source/pipeline/core/coordinators/stage.coordinator.ts",
          "label": "runStages",
          "markdown": "https://banes-lab.com/source/pipeline/core/coordinators/stage.coordinator.ts.md",
          "ref": "anatomy:file-pipeline-core-coordinators-stage-coordinator-ts"
        }
      ],
      "relation": "evidence"
    }
  ],
  "summary": "A mechanism that expresses policies as machine-readable rules which a pipeline or policy engine evaluates automatically.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-risk-management",
      "json": "https://banes-lab.com/json/records/architecture/risk-management",
      "label": "Risk Management",
      "markdown": "https://banes-lab.com/records/architecture/risk-management.md",
      "ref": "architecture:risk-management"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-policy-enforcement",
      "json": "https://banes-lab.com/json/records/architecture/policy-enforcement",
      "label": "Policy Enforcement",
      "markdown": "https://banes-lab.com/records/architecture/policy-enforcement.md",
      "ref": "architecture:policy-enforcement"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "const fooDeletePolicy = policy({\n  action: \"foo:delete\",\n  allow: input => input.subject.roles.includes(\"foo-admin\"),\n});\npolicyGate.enforce(fooDeletePolicy);",
    "before": "document.write(\"Only foo-admin may delete Foo\");",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": null,
  "scope": [
    "infrastructure",
    "deployment",
    "security"
  ],
  "severity": "recommended"
}